9106695

Method and System for User Authentication Using Dnssec

PublishedAugust 11, 2015
Assigneenot available in USPTO data we have
Technical Abstract

Patent Claims
20 claims

Legal claims defining the scope of protection, as filed with the USPTO.

1

1. A system for transmitting secure data with retrieval data from Domain Name System Security Extensions (DNSSEC), comprising: at least one Domain Name server communicatively coupled to a processor, a computer-readable memory accessible to the processor and comprising one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of: encoding a Delegation Signer (DS) Record within a Name Server (NS) Record, and using a NS channel to transmit NS and DS record data; wherein the system further comprises a mirror of a genuine Domain Name server created through a delegation of a Domain name space to the mirror, the mirror being communicatively coupled to the processor for performing the encoding of DS records within NS records; wherein said mirror is continuously built as information is requested by users, and wherein mirror records are synthesized by combining answers from a genuine Domain Name server with new signatures for authentication created when a signature is not available from the genuine Domain Name server.

2

2. The system of claim 1 , further comprising instructions which, when executed by the processor, cause the processor to carry out the additional step of: sending a NS Record, which includes a DS Record, from the Domain Name server to a user, said user receiving the NS record and extracting the DS record to authenticate a sending Domain Name server.

3

3. The system claim 2 , wherein the user is able to process an unencoded NS Record without a DS record part.

4

4. The system of claim 2 , wherein the user, in order to guarantee an authentication, communicates through a chain of name servers to a Root Name Server and then equivalently back down.

5

5. The system of claim 1 , wherein the system is scalable through initial implementation by a small group of clients and subsequent growth of implementation towards global usage.

6

6. The system of claim 1 , wherein DS Record incorporation into a NS Record is aided by a registrar.

7

7. The system of claim 1 , further comprising an automation detection platform, which works in cooperation with a domain name server; the platform comprising at least one filter, the filter accumulates statistics of name server requests.

8

8. The system of claim 7 , further comprising a hot-mitigating unit that uses collected statistics to mitigate attacks by hot-driven criminal networks.

9

9. The system of claim 7 , wherein the platform is implemented as a part of the Domain Name Server.

10

10. The system of claim 7 , wherein said automation detection platform compiles results with security implications in order to build a capability to identify automation.

11

11. The system of claim 7 , wherein said automation detection platform uses location evaluation to differentiate human from automated/remote control activity.

12

12. The system of claim 7 , wherein said automation detection platform uses interclick timing evaluation to differentiate human from automated/remote control activity.

13

13. The system of claim 7 , wherein said automation detection platform uses motion and state related automation detection to differentiate human from automated/remote control activity.

14

14. The system of claim 7 , wherein said automation detection platform uses IF and geolocation related automation detection to differentiate human from automated/remote control activity.

15

15. The system of claim 7 , wherein said automation detection platform uses tie based automation detection to differentiate human from automated/remote control activity.

16

16. The system of claim 7 , wherein said automation detection platform uses data hiding and separation to differentiate human from automated/remote control activity.

17

17. The system of claim 7 , wherein said automation detection platform uses rendering differential evaluation to differentiate human from automated/remote control activity.

18

18. The system of claim 7 , whereto said automation detection platform uses jitter evaluation to differentiate human from automated/remote control activity.

19

19. The system of claim 7 , wherein said automation detection platform uses VM timeslicing analysis to differentiate human from automated/remote control activity.

20

20. The system of claim 7 , wherein said automation detection platform uses cache validation to differentiate human from automated/remote control activity.

Patent Metadata

Filing Date

Unknown

Publication Date

August 11, 2015

Inventors

Daniel Kaminsky

Want to explore more patents?

Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.

Citation & reuse

Analysis on this page is generated by Patentable — an AI-powered patent intelligence platform. AI-generated summaries, explanations, and analysis may be reused with attribution and a visible link back to the canonical URL below. Patent abstracts and claims are USPTO public domain.

Cite as: Patentable. “METHOD AND SYSTEM FOR USER AUTHENTICATION USING DNSSEC” (9106695). https://patentable.app/patents/9106695

© 2026 Patentable. All rights reserved.

Patentable is a research and drafting-assistant tool, not a law firm, and does not provide legal advice. Documents we generate are drafts for review by a licensed patent attorney.